CVE-2018-6530

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

CVE-2018-6530: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

CVE-2018-6529: Improper Neutralization of Input During Web Page Generation

XSS vulnerability in htdocs/webinc/js/bscsmsinbox.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn...

CVE-2018-6528: Improper Neutralization of Input During Web Page Generation

XSS vulnerability in htdocs/webinc/body/bscsmssend.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver...

D-Link DIR-600M Wireless - Cross-Site Scripting

D-Link DIR-600M Wireless - Cross-Site Scripting Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul...

D-Link DIR-600M Wireless Cross Site Scripting

Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Hardware...

D-Link DIR-600M Wireless - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web:...

D-Link DIR-600M C1 Cross Site Scripting Vulnerability

D-Link DIR-600M C1 is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-600M C1 version 3.01, which stems from the program failing to properly filter user-submitted input. A remote attacker can exploit this vulnerability to inject malicious...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

Cross site scripting

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

CVE-2018-6936 affects D-Link DIR-600M C1 firmware 3.01. A cross-site scripting vulnerability exists in the router’s admin panel, allowing injection via the SSID or the name of a user account due to inadequate input filtering. Exploitation is demonstrated in public writeups (e.g., stored XSS via U...

CVE-2018-6936: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

PT-2018-4010 · D Link · D-Link Dir-600M C1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600M C1 version 3.01 Description: The issue exists due to inadequate protection of the web page structure in the administrative panel of the D-Link DIR-600M C1 Wi-Fi router's firmware. This allows a remote attacker to conduct a...

UBUNTU-CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

PT-2018-5760

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions 3.x up to and including 3.7.4 PowerDNS Recursor versions 4.x up to and including 4.0.6 Description: The issue allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure...

VulnCheck KEV: CVE-2015-2052

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...